Scriptonite - vulnerabilities (CVEs)
5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-02-07.
Products
- Music Request Manager - 3 CVEs
- Simple User Profile - 1 CVEs
- User Files - 1 CVEs
Newest CVEs of Scriptonite
- CVE-2025-25140 - CVSS 7.1 (high), 2025-02-07: Cross-Site Request Forgery (CSRF) vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User…
- CVE-2025-23953 - CVSS 10 (critical), 2025-01-22: Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue…
- CVE-2024-6019 - CVSS 6.1 (medium), 2024-09-12: The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to…
- CVE-2024-6018 - CVSS 6.1 (medium), 2024-09-12: The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which…
- CVE-2024-6017 - CVSS 6.1 (medium), 2024-09-12: The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could…
